Home Assistant Home Assistant Core

• CVE-2026-64825 Critical 9.3 Home Assistant Core < 2026.6.0 Path Traversal File Write via Backup Upload 0.6%
• CVE-2026-64824 High 8.4 Home Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restore 0.7%
• CVE-2026-64823 Medium 4.7 Home Assistant Core < 2026.5.4 XSS via Shelly media_player.py thumb URI 0.3%